Hiran V. Nath

This paper reviews over 120 security publications from 2008 to 2025, focusing on how these isolation boundaries can be breached, and introduces a quantitative scoring framework called ADPO, which rates defenses from 0 to 3 based on their Accuracy, Deployment ease, Performance impact, and Operational overhead.

A comprehensive security analysis on autonomous AI-penetration testing agents is carried out, which systematically analyse representative agent architectures, characterise their trust boundaries and attack surfaces and proposes a threat taxonomy that is aligned with the lifecycle and covers LLM lifecycle attacks, agent-architecture attacks and cross-cutting behavioural attacks.